[SSSD] sssd caching hosts ?
Dmitri Pal
dpal at redhat.com
Wed Mar 18 23:54:04 UTC 2015
On 03/18/2015 07:33 PM, Olivier wrote:
> Thanks for your replies,
>
> I found the ticket, that's why I asked : sounds to me a hard job to
> plan, especially now with DNSEC validation (and not sure that it would
> have a real added value)... A "natural" way for sssd if really a plan
> might be to catch zones from one of the ldap bakend available for bind ?
>
> Anyway, the real reason I'm investigating : I'm distributing sudo
> rules with ldap and I want to use hostname to tell which host the
> rules appliy on. I have told in nsswitch.conf to query the DNS to find
> out the hostname but I'm not sure about how is collected the hostname
> from the dns in the checking process (especially if the machine has
> more than one interface) ? Is the label considered as being the
> hostname the reverse of the IP adress for the default interface ?
>
You know that you can use SSSD with sudo integration, right? SSSD will
take care of this for you automatically.
http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf
> Thanks for any guidance,
>
> --
> Olivier
>
>
>
> 2015-03-17 21:27 GMT+01:00 Jakub Hrozek <jhrozek at redhat.com
> <mailto:jhrozek at redhat.com>>:
>
> On Tue, Mar 17, 2015 at 02:46:32PM -0400, Dmitri Pal wrote:
> > On 03/17/2015 12:56 PM, Lukas Slebodnik wrote:
> > >On (17/03/15 17:26), Olivier wrote:
> > >>Hi everyone,
> > >>
> > >>I was wondering if host requests caching is still part of sssd
> plans :
> > >>https://fedorahosted.org/sssd/ticket/359
> > >>
> > >This ticket is in deferred section
> > >which means that we do not plan to implement it in near future.
> > >
> > >But contribution is welcomed everytime and we can provide
> assistance.
> > >
> > >LS
> > >_______________________________________________
> > >sssd-devel mailing list
> > >sssd-devel at lists.fedorahosted.org
> <mailto:sssd-devel at lists.fedorahosted.org>
> > >https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
> > Why do you need it? It is really bad idea to have hosts map.
> > DNS is the way to do.
>
> Right, this is the direction Fedora has been pushing.
>
> In the meantime, you can still use nscd for the hosts map only.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> <mailto:sssd-devel at lists.fedorahosted.org>
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
>
>
>
>
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20150318/ee52d894/attachment.html>
More information about the sssd-devel
mailing list